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AMENDMENTS TO T¥¥K CLAIMS 
1-3 (Canceled) 

4. (Previously presented) A method of document retrieval in a network 
environment having web sites where documents are stored with a plurality of access 
levels and query servers where document searches are launched comprising, 

executing a query on a query server having access to a document index of 
documents available for searching on document servers provided in 
Q,, the web site by a person having a unique identification code without 

^ regard to access control limitations, yielding a list of all relevant 

Ijj documents, each document having a unique URL, 

Cq reviewing all URLs by the document servers after the search is executed using 

j an access control list associated with each document server to check 

whether each URL is compatible with the access level of the 
^ identification code of the person executing the query, 

delivering only those URLs that are compatible with the access level of the 

person, wherein each URL that is not compatible with the access level 
of the person is withheld, and 
preventing the person from discovering the URLs that are not compatible with 
the access level of the person. 



5. (Original) The method of claim 4 further defined by providing a data link 
between the query server and access control lists for associated web servers, 

6. (Original) The method of claim 5 further defined by storing the access 
control list separately from the index of documents. 

7. (Original) The method of claim 5 further defined by storing the access 
control list separately from the documents. 
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8, (Original) The meihod of claim 4 further defined by implementing access 
control with partial URLs indicating the hierarchy of documents to which a person with a 
unique identification code has access. 

9. (Original) The method of claim 4 further defined by implementing access 
control with a common gatewiiy interface script 

. . 10. (Original) The method of claim 9 wherein said common gateway interface 

CL script returns a message to the query server indicating URLs to which a person with a 

y unique identification code has access. 
LU 

gQ 11, (Original) The method of claim 5 wherein a single access control list is 

2 provided for all document servers. 

^ 12. (Original) The method of claim 5 wherein an access control list is provided 

h" for each document server. 

CO 

LU 

GO 13, (Previously presented) A method of document retrieval in a network 

environment having web sites where documents are stored and query servers where 
document searches are launched comprising, 

providing a plurality of document servers in the web sites, each having an 
association with a plurality of documents, each document identified 
with a unique URL, each document server having an access control list 
defining user identification and for each user identification listing 
URLs for which access is permitted or denied, 
executing a query net a query server having access to a document index of 
documents available for searching on the document servers by a 
person havi ng one of said identification codes, 
determining by one of the document servers whether each URL is compatible 
with the access level of the identification code of the person; and 
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producing only those documents whose URL is compatible with the access 
level of the identification code of the person, wherein each non- 
compatible URL is withheld. 

14. (Original) The method of claim 13 wherein the URLs are expressed in HTTP 
protocol, 

15. (Original) The meifaod of claim 13 wherein each access control list lists 

^ ' URLs for each user identification number with a hierarchical indication of documents for 
1 1 1 which access is permitted or denied. 

<J 16. (Original) The method of claim 15 wherein said hierarchical indication of 

5 documents is by partial URLs. 



< 



17. (Original) The mirthod of claim 13 further defined by accessing the access 
00 

18. (Original) The method of claim 13 further defined by accessing the access 
control list by a file transfer protocol. 

19. (Original) The method of claim 13 further defined by confirming access to 
the access control list by a script message from a document server. 
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